<script type="text/javascript" th:inline="javascript">
    /*<![CDATA[*/
    window._contextPath = /*[[ ${_contextPath} ]]*/ '/';
    window._user = /*[[ ${_user} ]]*/ {};
    window._host = /*[[ ${_host} ]]*/ {};
    window._csrf = /*[[ ${_csrf} ]]*/ {};
    window._defaultAvatar = _contextPath + '/assets/img/avatar.png';
    /*]]>*/
</script>